Add use_service_endpoint flag

Author: Kimmo Forss

articles/virtual-machines/workloads/sap/automation-configure-control-plane.md

@@ -164,7 +164,8 @@ The table below defines the parameters used for defining the Key Vault informati
 > | `firewall_deployment`	               | Boolean flag controlling if an Azure firewall is to be deployed        | Optional    |                               |
 > | `bastion_deployment`	               | Boolean flag controlling if Azure Bastion host is to be deployed       | Optional    |                               | 
 > | `enable_purge_control_for_keyvaults` | Boolean flag controlling if purge control is enabled on the Key Vault. | Optional    | Use only for test deployments |
-> | `use_private_endpoint`               | Boolean flag controlling if private endpoints are used.                | Optional    | Recommended                   |
+> | `use_private_endpoint`               | Are private endpoints created for storage accounts and key vaults.     | Optional    |                               |
+> | `use_service_endpoint`               | Are service endpoints defined for the subnets.                         | Optional    |                               |
 
 ### Example parameters file for deployer (required parameters only)
 

articles/virtual-machines/workloads/sap/automation-configure-workload-zone.md

@@ -220,10 +220,11 @@ ANF_service_level         = "Ultra"
 > [!div class="mx-tdCol2BreakAll "]
 > | Variable                             | Description                                                            | Type     | Notes                                 |
 > | ------------------------------------ | ---------------------------------------------------------------------- | -------- | ------------------------------------- |
-> | `enable_purge_control_for_keyvaults` | Boolean flag controlling if purge control is enabled on the Key Vault. | Optional | Use only for test deployments         |
-> | `use_private_endpoint`               | Boolean flag controlling if private endpoints are used for storage accounts and key vaults. | Optional |                                       |
-> | `diagnostics_storage_account_arm_id` | The Azure resource identifier for the diagnostics storage account      | Required | For brown field deployments.  |
-> | `witness_storage_account_arm_id`     | The Azure resource identifier for the witness storage account          | Required | For brown field deployments.  |
+> | `enable_purge_control_for_keyvaults` | Is purge control is enabled on the Key Vault.                          | Optional | Use only for test deployments         |
+> | `use_private_endpoint`               | Are private endpoints created for storage accounts and key vaults.     | Optional |                                       |
+> | `use_service_endpoint`               | Are service endpoints defined for the subnets.                         | Optional |                                       |
+> | `diagnostics_storage_account_arm_id` | The Azure resource identifier for the diagnostics storage account      | Required | For brown field deployments.          |
+> | `witness_storage_account_arm_id`     | The Azure resource identifier for the witness storage account          | Required | For brown field deployments.          |
 
 
 ## ISCSI Parameters